---
# description: Update the Steward host agent (refresh agent.py + restart) on hosts already running it.
# steward:category: host-agent
# Update an already-installed Steward host agent: refresh agent.py and restart.
#
# Deliberately does NOT touch the registration token or /etc/steward-agent.conf
# — the host already has a working token, so an update leaves identity alone and
# only swaps the agent binary. Connects as the managed `steward` account (set
# globally as the SSH user); no bootstrap password or token injection needed.
#
# For a fresh host with no agent, use provision.yml (new host) or install.yml
# (already-provisioned host) instead — those mint and install the token.
- name: Update Steward host agent
  hosts: all
  become: true
  gather_facts: false
  vars:
    steward_url: ""
  tasks:
    - name: Require steward_url
      ansible.builtin.assert:
        that:
          - steward_url | length > 0
        fail_msg: "Pass steward_url as an extra-var (the Update action sets it)."

    - name: Confirm the agent is already installed
      ansible.builtin.stat:
        path: /usr/local/lib/steward-agent/agent.py
      register: agent_file

    - name: Fail clearly if the agent is missing
      ansible.builtin.fail:
        msg: "No agent at /usr/local/lib/steward-agent — provision or install this host first."
      when: not agent_file.stat.exists

    - name: Refresh agent.py
      ansible.builtin.get_url:
        url: "{{ steward_url }}/plugins/host_agent/agent.py"
        dest: /usr/local/lib/steward-agent/agent.py
        mode: "0755"
        force: true
      notify: restart steward-agent

  handlers:
    - name: restart steward-agent
      ansible.builtin.systemd:
        name: steward-agent
        state: restarted
        daemon_reload: true